Load AWS information from a file.

Flags show up in the process name and in the `/debug/vars` of `expvar`. Using flags for secrets turns out to be a bad idea, thus the config file.

Alternative would have been to use environment variables: ops prefers config files.

## Question

- Should I move all the flags to a config file?

r: @camilo @fbogsany @shuhaowu 
cc: @Shopify/webscale 
Would `if stat.Mode().Perm()&^0700 != 0 {` be clearer, and remove the need for a comment?